Become a hacker: from “Test lab” to “Corporate laboratories”

In 2013, we launched unique penetration testing laboratories - “Test lab”. Being, in essence, copies of real corporate networks (not CTF) containing various vulnerabilities and configuration errors, laboratories make it possible to understand how a real attack occurs on a corporate network by attackers, to master their tools and methodologies, to learn how to build various attack vectors. Without such knowledge, information security professionals cannot develop high-quality protective measures.

After 4 years, “Test lab” did not lose its uniqueness and gathered more than 18,500 participants from around the world. Every day, working with such an audience, accumulating practical skills in penetration testing, forensics and countering cyber attacks, we make Pentestit Corporate Labs - unique in its composition, information security training courses.

Laboratories for penetration testing "Test lab"

The first laboratories “Test lab”, which are copies of a network of small companies (domain, mail, file server and something else), turned into complex and distributed centralized networks (Domains, VPN tunnels, server divisions, etc.), while without losing its essence - it is necessary to make a complete compromise of the IT structure of the laboratory, correctly building attack vectors. This is the unique “Test lab” - unlike CTF, nodes in laboratories are interconnected, the compromise of one of them can help develop the vector of attack on others. In some laboratories, we lay down the socio-technical attack vectors (for example, on an office manager or another laboratory employee) for greater realism.
')
Before you implement an idea, you need to understand your target audience well. Each time, starting another laboratory, we gain invaluable practical experience, which, together with our skills in finding and operating vulnerabilities, we transfer to Pentestit Corporate Laboratories, making them an excellent training ground for obtaining quick and high-quality practical training in the field of information security for information security, pentesters, developers and system administrators.

Warm up - “Zero Security: A”

Training in "Corporate laboratories" requires high-quality preliminary training. Such training can be obtained at the Zero Security: A course, where, under the supervision of the curator, you will learn the standard Kali Linux Rolling Edition 2017 toolkit, learn about all stages of penetration testing - from intelligence and information gathering to finding and exploiting vulnerabilities and social engineering. As well as "Corporate laboratories", practical work in specialized laboratories is 70% of the course.

Hardcore - Pentestit Corporate Labs

We have our own view on conducting courses, so webinars make up only 30%, the remaining 70% is an intensive practice, leaving the knowledge “at your fingertips”. Such a training scheme requires maximum involvement and commitment - webinars provide insight into how to search, exploit vulnerabilities, know how to resist attacks and deal with incidents, but they are not able to teach how to think correctly. This experience can only give practice. Let's look at some cases.





Another feature of “Corporate Laboratories” is a single plot of the laboratory environment, to put it simply - laboratories are replicas of real companies with embedded vulnerabilities and configuration errors and require correctly aligned attack vectors. Any of our training programs is accompanied by a curator, whose task is to assist in the implementation of tasks (if required), as well as monitoring the correctness of their implementation. The course ends with the issuance of a proprietary certificate.




If you have questions - ask in the comments. See you at Pentestit courses !